Frame 6942: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.542475000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.542475000 UTC Epoch Arrival Time: 1511226052.542475000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 46.676735000 seconds] Frame Number: 6942 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xdc70 (56432) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x57cc [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3565249, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6628] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 3565249 (relative sequence number) Sequence Number (raw): 2950181630 [Next Sequence Number: 3566297 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2969 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.133619000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 6812] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 53] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 28 6a 0a 50 e8 e7 ab cc ff 59 59 33 ff eb 9d 8b (j.P.....YY3.... 0010 06 33 c9 39 78 08 0f 95 c1 89 4c 24 28 eb 8d 8b .3.9x.....L$(... 0020 06 e9 91 00 00 00 f2 0f 10 06 66 0f 2f 05 a0 71 ..........f./..q 0030 55 10 f2 0f 11 44 24 20 77 14 f2 0f 10 0d c0 71 U....D$ w......q 0040 55 10 66 0f 2f c8 77 06 f2 0f 2c c0 eb 69 f2 0f U.f./.w...,..i.. 0050 10 05 70 71 55 10 f2 0f 10 0d 90 71 55 10 e8 31 ..pqU......qU..1 0060 53 fc ff dd 44 24 20 f2 0f 11 44 24 18 dd 44 24 S...D$ ...D$..D$ 0070 18 e8 5c 55 fc ff dd 5c 24 10 f2 0f 10 44 24 10 ..\U...\$....D$. 0080 0f 57 c9 66 0f 2f c8 76 25 51 51 f2 0f 11 04 24 .W.f./.v%QQ....$ 0090 ff 15 b0 d3 3b 10 dd 5c 24 28 f2 0f 10 44 24 28 ....;..\$(...D$( 00a0 f2 0f 58 44 24 20 59 59 f2 0f 11 44 24 10 dd 44 ..XD$ YY...D$..D 00b0 24 10 e8 ff 51 fc ff 89 44 24 28 e9 ec fe ff ff $...Q...D$(..... 00c0 8a 4b 0c 80 f9 01 74 49 0f b6 c1 2b c7 74 31 48 .K....tI...+.t1H 00d0 48 0f 84 a6 00 00 00 48 0f 84 98 00 00 00 48 0f H......H......H. 00e0 84 81 00 00 00 48 74 52 48 74 3c 48 0f 84 84 00 .....HtRHt